Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/ItWNSfCHSVAN0dTilCZVnJhPMGw.roa
File: ItWNSfCHSVAN0dTilCZVnJhPMGw.roa (raw, json)
Hash identifier: A4+CciXKf3W7Tne3s+bNjaE1I7vWeLnz+nxq5iDux3U=
Subject key identifier: 22:D5:8D:49:F0:87:49:50:0D:D1:D4:E2:94:26:55:9C:98:4F:30:6C
Certificate issuer: /CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Certificate serial: 01A1C0F6D4E241DEA320AA40E3E4C5C7C6A7
Authority key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/ItWNSfCHSVAN0dTilCZVnJhPMGw.roa
Signing time: Mon 09 Nov 2026 15:39:24 +0000
ROA not before: Mon 09 Nov 2026 15:39:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206178
IP address blocks: 2a01:e901:165::/48 maxlen: 48
2a01:e901:175::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:f6:d4:e2:41:de:a3:20:aa:40:e3:e4:c5:c7:c6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Validity
Not Before: Nov 9 15:39:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22d58d49f08749500dd1d4e29426559c984f306c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:78:c8:17:dc:19:69:4e:6c:e4:ca:4c:cd:
c4:3f:16:4c:9d:f5:4f:89:fc:e5:e5:f8:9e:bc:6f:
92:8d:08:58:b6:f8:86:3b:9f:13:13:66:81:32:8c:
27:c9:82:95:e6:b5:03:e9:4b:ee:90:7e:6c:73:07:
9c:26:04:38:79:c3:94:4c:13:c5:fe:6f:24:54:35:
d5:e0:fa:ee:dd:6d:2a:ad:d2:7d:2a:ee:ec:3c:71:
93:40:01:8f:47:3b:9d:5e:a6:30:7d:d8:7f:c9:c3:
55:e1:50:fe:24:bf:ad:f5:30:d4:df:f6:d8:71:15:
fe:07:a5:3e:04:b2:91:e6:22:4f:0f:dc:43:89:31:
24:1e:a0:2b:b0:f6:d3:3b:c9:72:78:dc:5a:9c:cd:
06:33:d3:d9:6c:a8:34:fe:33:29:b8:a7:92:58:82:
0f:5a:0d:45:91:58:01:7f:67:fc:f5:77:b3:ea:e1:
68:17:c6:d8:60:d5:e1:1f:64:11:ec:25:4c:2e:7d:
b2:25:01:e7:7d:6c:49:0c:6d:82:46:44:d9:52:f7:
59:c0:4a:61:41:55:c3:83:b5:84:05:9a:b4:d4:40:
ef:ff:a5:aa:7f:14:0d:bc:ab:52:2c:b2:41:c3:93:
2b:fe:4d:45:79:09:1e:31:0e:66:d7:bc:4f:96:dc:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:8D:49:F0:87:49:50:0D:D1:D4:E2:94:26:55:9C:98:4F:30:6C
X509v3 Authority Key Identifier:
keyid:27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/ItWNSfCHSVAN0dTilCZVnJhPMGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:165::/48
2a01:e901:175::/48
Signature Algorithm: sha256WithRSAEncryption
83:f2:7f:53:86:6c:88:dd:b9:9a:75:4a:80:77:c4:55:e9:c6:
47:74:43:e2:3d:4d:50:2a:9c:9e:df:6b:59:71:01:7d:5a:1d:
c4:b8:06:ee:63:f1:a1:09:9b:12:5c:16:1a:f6:6b:bb:e3:f3:
45:76:26:8f:2d:f7:c8:bf:71:5f:78:e7:ca:ac:c7:8d:49:1e:
88:28:b3:6a:4f:f8:84:d6:1b:52:b0:ea:d8:2b:8d:27:b0:cf:
39:88:87:93:ff:e8:68:8e:c5:98:f6:8a:86:1e:19:12:94:87:
cb:12:af:2b:4f:4c:13:d8:51:53:3a:b9:0c:e7:01:69:03:5f:
67:6d:b4:f8:08:bf:57:87:42:cc:45:2c:ad:74:30:b0:48:9e:
9f:79:c4:ba:be:c0:ae:24:e3:23:32:5d:50:eb:80:0e:71:62:
ee:89:df:6b:0e:3e:d7:90:af:73:4c:da:88:41:d8:76:e8:8a:
f1:cc:a0:a6:92:76:aa:3f:5a:23:41:1c:76:e3:cd:01:a0:76:
99:a7:44:a0:62:1e:9b:a3:29:af:57:fc:3b:57:47:d8:56:b7:
3b:c3:34:0f:9c:44:28:01:5c:05:7f:d0:96:0b:fe:fb:de:04:
10:e8:4a:e0:f4:fe:9c:4f:6d:d3:c1:86:4e:a1:9b:97:47:52:
ea:b0:53:f1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaHA9tTiQd6jIKpA4+TFx8anMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MGM0MmZkZWMyZTIyZTBkN2Q5YWVkMzUzYWI3ZWI3YTZj
ZjhkZDgwHhcNMjYxMTA5MTUzOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQ1OGQ0OWYwODc0OTUwMGRkMWQ0ZTI5NDI2NTU5Yzk4NGYzMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34J4yBfcGWlObOTKTM3EPxZMnfVP
ifzl5fievG+SjQhYtviGO58TE2aBMownyYKV5rUD6UvukH5scwecJgQ4ecOUTBPF
/m8kVDXV4Pru3W0qrdJ9Ku7sPHGTQAGPRzudXqYwfdh/ycNV4VD+JL+t9TDU3/bY
cRX+B6U+BLKR5iJPD9xDiTEkHqArsPbTO8lyeNxanM0GM9PZbKg0/jMpuKeSWIIP
Wg1FkVgBf2f89Xez6uFoF8bYYNXhH2QR7CVMLn2yJQHnfWxJDG2CRkTZUvdZwEph
QVXDg7WEBZq01EDv/6WqfxQNvKtSLLJBw5Mr/k1FeQkeMQ5m17xPltw4hwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCLVjUnwh0lQDdHU4pQmVZyYTzBsMB8GA1UdIwQY
MBaAFCcMQv3sLiLg19mu01Orfremz43YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnd4Q19ld3VJdURYMmE3VFU2dC10NmJQamRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNDlhMTctZmUzYi00ZjRmLTgxNDUt
OTJmNGJmYTdlMGI1LzEvSXRXTlNmQ0hTVkFOMGRUaWxDWlZuSmhQTUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNDlhMTctZmUzYi00ZjRmLTgxNDUtOTJmNGJmYTdlMGI1
LzEvSnd4Q19ld3VJdURYMmE3VFU2dC10NmJQamRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgHpAQFl
AwcAKgHpAQF1MA0GCSqGSIb3DQEBCwUAA4IBAQCD8n9ThmyI3bmadUqAd8RV6cZH
dEPiPU1QKpye32tZcQF9Wh3EuAbuY/GhCZsSXBYa9mu74/NFdiaPLffIv3FfeOfK
rMeNSR6IKLNqT/iE1htSsOrYK40nsM85iIeT/+hojsWY9oqGHhkSlIfLEq8rT0wT
2FFTOrkM5wFpA19nbbT4CL9Xh0LMRSytdDCwSJ6fecS6vsCuJOMjMl1Q64AOcWLu
id9rDj7XkK9zTNqIQdh26IrxzKCmknaqP1ojQRx2480BoHaZp0SgYh6boymvV/w7
V0fYVrc7wzQPnEQoAVwFf9CWC/773gQQ6Erg9P6cT23TwYZOoZuXR1LqsFPx
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:01 2026 by rpki-client